{"id":"CVE-2026-105691","published":"2026-10-05T20:17:19.137","lastModified":"2026-10-06T17:17:18.470","description":"Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through child_process.exec. A user who can edit a file can store shell metacharacters in the fill color and trigger SVG export, causing commands to execute with the exporter service's privileges. The same export can be triggered through a valid public share link to a malicious file. This vulnerability is fixed in 2.18.0.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://github.com/penpot/penpot/commit/aa3bc1ae984577f0354d4270d2546e15985f4bcf","tags":[]},{"url":"https://github.com/penpot/penpot/pull/11272","tags":[]},{"url":"https://github.com/penpot/penpot/releases/tag/2.18.0","tags":[]},{"url":"https://github.com/penpot/penpot/security/advisories/GHSA-4f36-m4hj-cv86","tags":[]},{"url":"https://github.com/penpot/penpot/security/advisories/GHSA-4f36-m4hj-cv86","tags":[]}],"exploitRefs":[{"url":"https://github.com/penpot/penpot/commit/aa3bc1ae984577f0354d4270d2546e15985f4bcf","tags":[]},{"url":"https://github.com/penpot/penpot/pull/11272","tags":[]},{"url":"https://github.com/penpot/penpot/releases/tag/2.18.0","tags":[]},{"url":"https://github.com/penpot/penpot/security/advisories/GHSA-4f36-m4hj-cv86","tags":[]},{"url":"https://github.com/penpot/penpot/security/advisories/GHSA-4f36-m4hj-cv86","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows an attacker to inject shell commands via SVG export, leading to remote code execution with the service's privileges.","exploitability":"Exploitation is relatively easy if an attacker can edit a file or access a malicious public share link.","blast_radius":"If exploited, this could lead to full control over the affected Penpot instance and potential data loss or compromise.","remediation":"Upgrade to Penpot 2.18.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","svg","web","penpot"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-06T08:44:20.460Z"}}